---
typeId: req
recordId: benac-exec-003
fields:
  title: Isolated execution
  statement: Package operations using executable artifacts shall run isolated from the
    Benac UI, document store, blob store, raw secrets, private keys, local storage, DOM,
    and other package state unless mediated by explicit host capabilities.
  rationale: Package executable artifacts must not compromise the kernel.
  verification: Sandbox test package attempts disallowed access and is denied.
  testable: true
  status: draft
  area: BENAC-EXEC
  sourceDocument: /home/johnb/Downloads/benac_syrs_v0_4_integrated_authentication.md
  sourceVersion: v0.4
  sourceSections:
    - 10.9 Execution model and package host interface
  order: 100
---
